Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/ca011a09-1aef-3c07-8a8b-518dd7d9556f.roa
File:                     ca011a09-1aef-3c07-8a8b-518dd7d9556f.roa (raw, json)
Hash identifier:          4ZytBzMipvyn4hKTWeSQBdbKumF4DDwiZT/jVBftIKQ=
Subject key identifier:   F6:1B:E6:D1:2E:38:E3:A8:24:7A:DE:F9:DE:50:D4:43:90:74:B8:B2
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F43285847EBBF80C323D31ED40A4FCFC0
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/ca011a09-1aef-3c07-8a8b-518dd7d9556f.roa
Signing time:             Mon 18 Nov 2024 14:00:40 +0000
ROA not before:           Mon 18 Nov 2024 14:00:40 +0000
ROA not after:            Sun 16 Feb 2025 14:00:40 +0000
asID:                     55293
IP address blocks:        209.124.92.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:eb:bf:80:c3:23:d3:1e:d4:0a:4f:cf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Nov 18 14:00:40 2024 GMT
            Not After : Feb 16 14:00:40 2025 GMT
        Subject: CN=2faabe9b-a63d-4aa1-923b-9a54958e137e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:7c:bd:59:c9:5f:44:e2:1c:f1:e2:38:a0:8a:
                    34:27:bf:c8:d1:51:7b:cd:47:f7:12:30:ad:38:5e:
                    52:a2:42:37:cc:f5:35:59:57:ef:91:4b:f8:3a:43:
                    a7:70:d1:60:2f:cc:18:89:cb:f2:58:88:de:2d:27:
                    bc:9f:3c:69:f7:8a:1b:51:14:71:8b:dc:5e:a8:78:
                    3b:d9:b7:a8:a4:2e:3b:1d:28:65:ff:0f:9a:ba:da:
                    f3:68:46:e7:46:92:d6:21:60:9d:ee:75:27:91:5e:
                    a2:c3:64:d7:9f:a8:87:24:cc:fd:bb:8e:ab:ed:51:
                    11:23:3c:f9:e5:9a:58:4a:a5:9f:ec:f4:e5:de:2c:
                    84:89:cc:73:c3:09:c6:f0:8f:cf:b3:17:57:1e:a2:
                    fd:96:10:03:87:5b:f3:4e:49:9c:95:45:0d:d2:97:
                    90:7e:fe:36:27:db:d5:7f:13:f1:cd:fd:85:b9:26:
                    d6:e1:10:a3:c1:48:1d:c5:a0:2e:20:c3:ed:e2:3b:
                    bf:67:3b:eb:89:c4:0e:28:4c:52:8c:08:c5:66:bc:
                    03:52:b5:70:1f:bb:53:95:e4:be:f5:95:fb:70:4c:
                    8b:da:a5:73:ef:11:86:7b:a2:61:21:c3:1c:02:a8:
                    c4:ee:ad:96:7c:e2:6c:98:f5:64:18:f7:e1:d9:2a:
                    91:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:1B:E6:D1:2E:38:E3:A8:24:7A:DE:F9:DE:50:D4:43:90:74:B8:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/ca011a09-1aef-3c07-8a8b-518dd7d9556f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.124.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:39:54:db:1e:66:93:b3:dc:45:cb:77:1f:ad:e1:ee:91:9b:
         30:05:02:a7:5f:5c:0a:1e:11:a8:ae:c1:f9:98:0b:7a:19:e0:
         e7:95:9a:8c:2c:fc:73:d6:26:42:47:9f:6c:da:e9:5b:78:2e:
         da:3b:91:e0:e8:cb:b7:55:a2:a7:b2:7e:96:88:ca:02:e4:ed:
         c0:8e:05:69:e6:59:75:34:de:c3:32:69:82:f6:9d:5e:45:ae:
         95:0b:d2:ee:f2:1d:33:60:f5:89:30:6f:ad:a7:7e:44:41:8d:
         0e:f6:d4:8c:73:5b:de:e3:54:f0:be:35:46:fe:6f:76:00:6a:
         d9:aa:a6:3b:fd:8c:ac:63:79:9c:c7:7e:42:5a:ee:4e:1f:a2:
         c6:c2:8a:31:7f:74:5f:99:3e:9f:d2:bf:de:ce:ed:0e:bc:3a:
         95:74:7d:30:77:68:d3:19:44:a1:be:67:a9:24:e4:f9:c3:fb:
         cf:77:97:b1:33:3d:08:70:ea:3c:ea:ca:93:f1:16:47:0c:63:
         55:1f:a8:8b:b3:a9:cc:fe:8c:40:ad:2a:0c:92:be:fa:ea:ff:
         2c:8d:cb:c7:56:15:1b:57:1f:9a:7c:1f:66:f4:2e:81:d1:91:
         8b:94:c4:ae:b1:e4:b9:0d:7b:80:18:e1:2c:36:15:14:74:ae:
         5b:2d:83:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:49:00 2024 by rpki-client on console-ams.rpki-client.org